DeltaTangoLima

joined 2 years ago
[–] DeltaTangoLima@reddrefuge.com 13 points 7 months ago* (last edited 7 months ago) (1 children)

Hmmm - interesting. I hadn't bothered to check before now, but I'm seeing something similar on one of the two PBS CTs I run.

Comparing the output of netstat -lantop on both CTs, I can see that the one with more outbound traffic has more waiting connections from localhost on port 82, the port Proxmox Backup Servers provides its API over:

tcp        0      0 127.0.0.1:51562         127.0.0.1:82            TIME_WAIT   -                    timewait (40.38/0/0)
tcp        0      0 127.0.0.1:56342         127.0.0.1:82            TIME_WAIT   -                    timewait (29.92/0/0)
tcp        0      0 127.0.0.1:44864         127.0.0.1:82            TIME_WAIT   -                    timewait (58.94/0/0)
tcp        0      0 127.0.0.1:45028         127.0.0.1:82            TIME_WAIT   -                    timewait (11.88/0/0)
tcp        0      0 127.0.0.1:44026         127.0.0.1:82            TIME_WAIT   -                    timewait (48.66/0/0)
tcp        0      0 127.0.0.1:44852         127.0.0.1:82            TIME_WAIT   -                    timewait (58.80/0/0)
tcp        0      0 127.0.0.1:59620         127.0.0.1:82            TIME_WAIT   -                    timewait (0.00/0/0)
tcp        0      0 127.0.0.1:56374         127.0.0.1:82            TIME_WAIT   -                    timewait (30.98/0/0)
tcp        0      0 127.0.0.1:51544         127.0.0.1:82            TIME_WAIT   -                    timewait (39.98/0/0)
tcp        0      0 127.0.0.1:59642         127.0.0.1:82            TIME_WAIT   -                    timewait (0.00/0/0)
tcp        0      0 127.0.0.1:45008         127.0.0.1:82            TIME_WAIT   -                    timewait (10.92/0/0)
tcp        0      0 127.0.0.1:45016         127.0.0.1:82            TIME_WAIT   -                    timewait (11.76/0/0)

I'm wondering if the graph is pulling aggregated network data, including the loopback interface. If so, and it's all just port 82 stuff on 127.0.0.1, then it's probably nothing to worry about.

Edit: found this forum post that seems to indicate it's aggregating all the byte values from /proc/dev/net, so this is probably nothing to worry about if your netstat output, like mine, only shows API conections to/from 127.0.0.1 on port 82.

[–] DeltaTangoLima@reddrefuge.com 2 points 7 months ago (1 children)

Seriously - the whole thing is such a befuddling mess to us non-Americans.

How exactly can one win the popular vote but not the actual election? From the outside, the reporting I've seen always talks about the faithless elector problem (not in those words - just in describing the problems). Is it more to do with how many votes (electors) each state gets, based on population size?

[–] DeltaTangoLima@reddrefuge.com 1 points 7 months ago (3 children)
[–] DeltaTangoLima@reddrefuge.com -2 points 7 months ago (6 children)

I believe the states responsible for those silly outcomes have since passed laws to prevent it happening again.

Could be wrong, but I listened to a podcast last week with an American professor who's pretty much written the book, explaining the history of the Electoral College and how it really works. I'm sure he said those states since fixed those loopholes.

Either way, the damage is done today. Another four years of stupidity in charge.

[–] DeltaTangoLima@reddrefuge.com 2 points 8 months ago

Cheers mate - will have a play

[–] DeltaTangoLima@reddrefuge.com 4 points 8 months ago (2 children)

Well, damn! Ondsel ES was what made my transition from F360 that much easier. Really hoping I can fly FreeCAD 1.0 as easily as I could Ondsel. Grabbing RC1 now... 🤞

[–] DeltaTangoLima@reddrefuge.com 4 points 8 months ago

Maybe a small piece of personalised luggage for the holiday. Does she wear makeup? Maybe a nice makeup case with her initials on it.

If that's not her thing, what about something for your home (assuming you live together)? My wife and I tend to buy ourselves the "bigger" things for Christmas, as our gift to each other - some furniture we've been wanting, or similar.

If that doesn't sounds like you guys, there's the tried and true jewelry option. Or maybe just cruise Etsy for the sorts of things she likes (does she like knick knacks, or ornamental stuff?) that might be customisable.

Failing that, have a think about what makes you special as a couple. Is there a shared interest or experience that got you together or you always talk about? Is there something in that?

Finally, I've been holding on to some ideas for future inspiration should I need them:

  • Waveform art: record yourself saying you love her, have the waveform turned into a print, or a piece of jewelry, or similar
  • Anamorphic art: a skewed picture that reveals itself when a specifically shaped mirror is put behind it
  • A glass lamp base filled with something meaningful: I always thought of filling one with origami love hearts
  • Ambigrams: maybe you can figure out an ambigram with both your names, and have it made into something - a print or a wood carving (this will probably take a lot longer than the time you have before Christmas)
  • Birth stones, star signs, birth flowers, birth fruit: admittedly these are probably better suited to birthdays
[–] DeltaTangoLima@reddrefuge.com 22 points 8 months ago

Jesus - they don't even name the report so interested people can search for it. Lame.

Also, least-intrusive doesn't mean most-trustworthy. Just don't use any of them or, if you do, be sure to take all steps at your disposal to not give any personal information to them.

[–] DeltaTangoLima@reddrefuge.com 39 points 8 months ago (1 children)

Lol @ "some 20 years ago ... ADSL from 2002". Thanks for making me feel old!

[–] DeltaTangoLima@reddrefuge.com 1 points 8 months ago (1 children)

Great suggestion! Thank you. Have you had any luck accessing it on iOS yourself?

No dramas if not - just that I tried using Orbot and the Tor Browser (the one developed by Mike Tigas, in the App Store), but no joy. I'm reasonably new back on iOS, so I'm not (yet) across the best way to use Tor sites on the platform.

[–] DeltaTangoLima@reddrefuge.com 2 points 8 months ago* (last edited 8 months ago)

Honestly, I'm using an old gag FB account I created back in 2011. I guess that was well before they started asking people to verify with selfies and phone numbers.

[–] DeltaTangoLima@reddrefuge.com 2 points 8 months ago

Hmmm - DDG's browser might be a good alternative, if I only use it for this one purpose. Thanks for the suggestion.

 

First and foremost, I'll get this out of the way: I abhor all commercial social media. I don't trust them, I know users are the product, and - ultimately, I feel they're nothing but a cancer on society.

But, I also have to acknowledge that, for one or two use cases at least, they seem pretty unavoidable.

For me, that one use case is Facebook Marketplace. Here in Australia, there's simply no better alternative if you want to reach a large number of potentially interested buyers (or even buy some stuff yourself). The supermarket noticeboard is no more; the Trading Post was bought long ago and died on the vine; and Gumtree has devolved into a cesspool of nothing but scammers and fuckwits.

So, I use FB Marketplace. My FB account isn't in my name, uses a throwaway email address, and has no followers or friends. It's only a member of the local buy/sell groups that I'm interested in, and it performs no "social" activities (posts, likes, etc) at all.

Until now, I generally only use FB marketplace with a "clean", dedicated browser on my computer, running in private mode and via a VPN. But, it means I frequently miss messages from interested parties when I'm away from my computer.

I also sometimes use the mbasic.facebook.com site from a private Firefox tab on my iPhone, but FB has just started telling me I need to use Chrome (no. fucking. way.) or Safari (maaaaaybeeeee?) after October 28th.

When I was on Android, there were a few wrapper apps that I was able to use but, so far, my searches for an equivalent on iOS have turned up nothing.

So, knowing full well this may lead to nowhere, I thought I'd ask this community: does anyone have a good, privacy-friendly way to use FB on iOS?

Thanks in advance for any useful tips or suggestions.

 

Can't even take a short break from 3D designing stuff. Glad I'm switching over to FreeCAD. All I wanted was to grab some dimensions from an old model.

75
submitted 1 year ago* (last edited 1 year ago) by DeltaTangoLima@reddrefuge.com to c/foss@beehaw.org
 

cross-posted from: https://reddrefuge.com/post/189022

Obligatory note for those that haven't read/retained the news: Simple Mobile Tools was sold to ZipoApps - an Israeli company that specialises in buying and monetising popular apps.

Fossify is the fork of the Simple Mobile Tools repos, and they're gradually getting through each app and re-releasing them under the new name.

 

cross-posted from: https://reddrefuge.com/post/189022

Obligatory note for those that haven't read/retained the news: Simple Mobile Tools was sold to ZipoApps - an Israeli company that specialises in buying and monetising popular apps.

Fossify is the fork of the Simple Mobile Tools repos, and they're gradually getting through each app and re-releasing them under the new name.

 

Obligatory note for those that haven't read/retained the news: Simple Mobile Tools was sold to ZipoApps - an Israeli company that specialises in buying and monetising popular apps.

Fossify is the fork of the Simple Mobile Tools repos, and they're gradually getting through each app and re-releasing them under the new name.

 

So, after nearly 10 years of faithful service, my shitty ol' Wanhao i3 Plus is finally ready for retirement. Steppers are buzzing, occasional collisions with the bed, and the heat block just doesn't... heat as quickly as it used to.

Talking to a mate who does a lot more printing than I, it seems I can't pass up the Ender 3 V2. The right price for what I typically do, and is backed by a mature community.

I've ordered the auto-level kit with it, but nothing else. My i3 already sits in a Lack Rack I made, and it should comfortably take the new printer.

I have a couple of functional print projects on the backburner that were waiting for me to make a move, but wanted to get some advice on mods and upgrades first, that might make the first experience with the Ender even better.

So, asking the more experienced Ender owners out there: are there any essential upgrades, preferably 3D printed, you think I should look at first?

Cheers in advance!

56
submitted 2 years ago* (last edited 2 years ago) by DeltaTangoLima@reddrefuge.com to c/selfhosted@lemmy.world
 

I just spent a good chunk of today migrating some services onto new docker containers in Proxmox LXCs.

As I was updating my network diagram, I was struck by just how many services, hosts, and LXCs I'm running, so counted everything up.

  • 116 docker containers
    • Running on 25 docker hosts
    • 50 are the same on each docker host - Watchtower and Portainer agent
  • 38 Proxmox LXCs (19 are docker hosts)
  • 8 physical servers
  • 7 VLANs
  • 5 SSIDs
  • 2 NASes

So, it got me wondering about the size of other people's homelabs. What are your stats?

 

Hi all - I have a sectional garage door, that I'm currently automating with a relay to trigger button press on the garage door motor, and a simple reed switch for open/closed state, using esphome on a Wemos D1 mini.

Lately, I've been thinking about finding/building a door position sensor, instead of the reed switch.

If I had position data being sent reliably, I could very easily determine if the door is opening, as well as open/close state. I have a number of automations in mind that would benefit from such data.

So far, my searches for "garage door position sensor", and variations thereof, aren't bearing much fruit. I've been pondering of couple of home-brewed approaches:

  1. A series of reed switches on a track that a magnet on the door will trip as it moves along.

    I guess it's theoretically doable, but they'd have to be sensitive enough to be tripped by a moving magnet, but not so sensitive that too many of them are tripped at the same time, which might confuse my "moving mathematics" to determine door movement direction.

     

  2. An ultrasonic sensor could possibly do the job.

    I'm mulling over exact placement of it so it has a reliable surface to reflect off, to give me an accurate read on position. Nothing (yet) comes to mind on that front.

It's not that I wouldn't enjoy going down the very enjoyable rabbit hole of prototyping something, but I thought I'd just ask first.

Is anyone aware of an off-the shelf sensor that might give me what I'm looking for, please? If it needs something beefier than an ESP board, I've got a couple of RasPis lying around doing nothing.

Cheers in advance for any suggestions.

 

Just wondering what tools and techniques people are using to keep on top of updates, particularly security-related updates, for their self-hosting fleet.

I'm not talking about docker containers - that's relatively easy. I have Watchtower pull (not update) latest images once per week. My Saturday mornings are usually spent combing through Portainer and hitting the recreate button for those containers with updated images. After checking the service is good, I manually delete the old images.

But, I don't have a centralised, automated solution for all my Linux hosts. I have a few RasPis and a bunch of LXCs on a pair of Proxmox nodes, all running their respective variation of Debian.

Not a lot of this stuff is exposed direct to the internet - less than a handful of services, with the rest only accessible over Wireguard. I'm also running OPNsense with IPS enabled, so this problem isn't exactly keeping me up at night right now. But, as we all know, security is about layers.

Some time ago, on one of my RasPis, I did setup Unattended Upgrades and it works OK, but there was a little bit of work involved in getting it setup just right. I don't relish the idea of doing that another 40 or so times for the rest of my fleet.

I also don't want all of those hosts grabbing updates at around the same time, smashing my internet link (yes, I could randomise the cron job within a time range, but I'd rather not have to).

I have a fledgling Ansible setup that I'm just starting to wrap my head around. Is that the answer? Is there something better?

Would love to hear how others are dealing with this.

Cheers!

13
submitted 2 years ago* (last edited 2 years ago) by DeltaTangoLima@reddrefuge.com to c/selfhosted@lemmy.world
 

So I recently (a couple months ago) moved my fragmented docker-on-raspberry-pi architecture over to a Proxmox cluster. I'm running it on a pair of HP DL360 G6s, and I couldn't be happier.

Except, well, I could be happier with just one more thing: high availability.

In particular, I want HA for my OPNsense firewall/router, but eventually for more of the workloads my family are depending on for life in general - Home Assistant, Plex, Overseerr, Immich, etc etc.

My current storage setup is a couple ratty old ARM-based NASes - an ancient Netgear ReadyNAS and an even more ancient Qnap TS-410. They're both populated with 4 x 4TB (max raw size they can take) using RAID5, so I get about 22TB usable across the pair of them. They mostly store media for my Plex setup, but also support my 2N+C backup strategy for stuff like Immich, Paperless, and other important data.

My high-level plan is to grab another DL360, so I can have a quorum, then introduce a new storage system that:

  • provides an iSCSI target for my Proxmox cluster; and
  • can eventually grow to replace my old NASes.

The two solutions I'm pondering are:

  1. Build a TrueNAS setup from scratch - mini ITX case, board - the lot
  2. Pickup something tried, true and proven in the market, like a Synology

Up front cost is a consideration - I have a family to feed, so I can't just run out and buy an 8-bay enclosure and fully populate it with 16TB disks.

Whatever I get, I'm likely to want to start with, say, 3 disks and grow it over time.

So, I guess this is a call out to the community to share any and all successes, war stories, and other advice. The more technical, the better. I want to make a sound, data-based decision here, and anecdotes from others who think like me are the best way to set my compass.

Cheers for anything you can offer!

 

This weekend, I cutover my home network to OPNsense on Proxmox.

So far, it's been... OK. I'm having some issues with state tracking on a couple of VLANs, so need to dig into some pcaps from my switch and see what's going on there.

But one question I have is how to get the best out of my hardware, as it seems my WAN speed is a lot less than it should be.

I'm running Proxmox on a HP DL360 G6, with the pair of built-in 1Gbps NICs. One NIC is dedicated to my WAN connection, using a bridge in Proxmox, and it's plugged in directly to my 1Gbps fibre internet.

The OPNsense VM has 4 cores, 8GB of RAM, and a 40GB volume.

Using my previous hardware router/firewall (Draytek VIgor 2865), I was easily getting some decent speeds - 500Mbps to 700Mbps+. But, I'm lucky if I can get speeds any higher than about 120Mbps right now through OPNsense.

I've disabled hardware checksum offload and hardware TCP segmentation in the OPNsense firewall. Then I found this post that suggested doing the same to the NIC and bridge in Proxmox as well.

I've even tried rate limiting the interfaces on the OPNsense VM to 1000Mbps (OPNsense says they're 10Gbps), but nothing's made a difference.

So, throwing out to my newfound Lemmy network: does anyone have any suggestions on what to try, or look at, next, please? Kinda worried I might have to go back to the Draytek, which would be a real shame. OPNsense has already proven to be far superior in every other way.

 

I've fired up my own Lemmy instance, but am keeping it closed right now. It's mainly so I don't contribute to the user load on the more popular instances, but I may open it up to a circle of friends and family at some point in the future.

But, one of the things that has me worried right now is how I could prevent illegal/unwanted content from being cached on my instance.

Aside from blocking entire instances, how can I stop a user from subscribing to a remote community that includes illegal/unwanted content?

What if they sub to an acceptable community (this one, for example) and someone posts something that escapes the mods' attention temporarily, but that content ends up on my instance?

view more: next ›